Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D0426985EA011EE85A06F814AD9E6FC.roa
File: 5D0426985EA011EE85A06F814AD9E6FC.roa (raw, json)
Hash identifier: oN50QNeAWmZkxeLy1T4hUlabAIhA5IudPG+5uOdUf1g=
Subject key identifier: 21:29:2C:2D:DF:6B:F5:2B:63:A5:EB:5B:26:B9:3A:34:F5:95:60:01
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D8F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D0426985EA011EE85A06F814AD9E6FC.roa
Signing time: Fri 29 Sep 2023 08:15:34 +0000
ROA not before: Fri 29 Sep 2023 08:15:30 +0000
ROA not after: Tue 30 Sep 2025 08:15:30 +0000
asID: 20473
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3471 (0xd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 29 08:15:30 2023 GMT
Not After : Sep 30 08:15:30 2025 GMT
Subject: CN=651687a6-c9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:e5:cd:10:f9:67:fc:73:bd:a5:35:2a:13:
f0:fb:0a:17:f5:07:32:3f:6b:b3:31:ed:2d:32:2d:
0d:ba:9a:68:1b:bf:04:f0:64:11:1d:22:1d:7f:b6:
0e:79:40:26:8b:7f:26:80:09:de:08:49:af:07:f9:
16:ec:3b:04:e7:8e:af:e0:24:b7:7e:14:ac:cf:b4:
bf:94:e2:30:bf:07:a6:43:3f:85:13:34:3f:e7:98:
21:46:83:3e:60:22:1b:ef:39:79:7d:28:06:21:db:
06:8f:fd:14:ae:cf:51:93:7e:be:44:a3:c5:0a:da:
5e:e9:92:64:d4:32:2d:bb:90:4e:0f:0e:e8:43:a0:
9c:a7:23:74:02:9e:0d:6a:58:39:9e:72:1d:6a:04:
a0:1e:6d:e5:f3:0a:96:c6:19:d5:6b:02:22:92:93:
47:9c:10:33:1e:32:75:bb:aa:0a:4c:b4:b9:ce:60:
89:56:9e:5a:c6:b5:41:aa:18:a1:c1:db:5d:44:d9:
49:d5:6a:81:fb:4c:bd:e2:fb:2a:d6:c8:69:55:1c:
32:8f:43:b1:d8:7d:79:71:c7:0b:2a:fa:39:a3:b8:
f5:2e:fc:b1:a2:ae:fe:f3:7b:86:7f:39:7c:73:22:
91:f9:51:14:b3:85:82:7c:45:d1:a9:51:3e:a4:73:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:2C:2D:DF:6B:F5:2B:63:A5:EB:5B:26:B9:3A:34:F5:95:60:01
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5D0426985EA011EE85A06F814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4b:47:3c:b7:9e:f8:00:1a:c3:c3:95:df:dd:d3:f5:64:40:
0e:b7:29:83:fd:60:9c:86:4e:a5:b2:8b:4c:29:2b:16:8e:0f:
4f:e7:0d:72:1d:7e:5f:f5:84:4e:c6:1a:f1:bd:89:8f:0d:b5:
09:fc:37:dc:b8:28:7f:29:37:e2:6c:bb:51:a6:7f:a7:61:68:
f6:b2:06:cd:f0:6d:1e:86:0a:85:b9:a5:50:de:19:39:b5:5f:
17:f9:b0:a5:88:e4:60:3d:15:fa:79:67:ca:41:01:a6:6a:55:
d0:21:fe:a5:36:c2:3c:2c:01:b4:6f:92:05:09:52:67:36:4c:
80:c3:59:bd:0e:cd:5b:e9:89:dd:a9:64:b5:23:52:69:76:2e:
a1:4b:60:73:68:7a:40:53:9e:6f:6b:17:46:d2:28:b7:53:0c:
c1:7b:84:00:1a:6b:51:e2:91:e0:10:94:f7:2c:86:a6:75:4e:
b3:fa:4b:97:61:c2:e2:9b:88:be:20:23:6b:13:4a:a4:17:a3:
32:c0:56:46:dd:34:88:1b:d0:14:73:90:83:0d:4e:96:e1:5b:
5a:4c:81:c2:f7:fe:1c:4d:81:85:8a:fc:6d:47:a7:81:b4:04:
d8:ed:e0:15:5d:ab:06:2d:4b:e6:99:01:4a:46:00:18:2e:5d:
e4:0f:a3:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA5MjkwODE1MzBaFw0yNTA5MzAwODE1MzBaMBgxFjAU
BgNVBAMTDTY1MTY4N2E2LWM5ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAPuXNEPln/HO9pTUqE/D7Chf1BzI/a7Mx7S0yLQ26mmgbvwTwZBEdIh1/
tg55QCaLfyaACd4ISa8H+RbsOwTnjq/gJLd+FKzPtL+U4jC/B6ZDP4UTND/nmCFG
gz5gIhvvOXl9KAYh2waP/RSuz1GTfr5Eo8UK2l7pkmTUMi27kE4PDuhDoJynI3QC
ng1qWDmech1qBKAebeXzCpbGGdVrAiKSk0ecEDMeMnW7qgpMtLnOYIlWnlrGtUGq
GKHB211E2UnVaoH7TL3i+yrWyGlVHDKPQ7HYfXlxxwsq+jmjuPUu/LGirv7ze4Z/
OXxzIpH5URSzhYJ8RdGpUT6kc7QHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUISks
Ld9r9StjpetbJrk6NPWVYAEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVEMDQyNjk4NUVBMDExRUU4NUEwNkY4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTswDQYJKoZIhvcNAQEL
BQADggEBAHVLRzy3nvgAGsPDld/d0/VkQA63KYP9YJyGTqWyi0wpKxaOD0/nDXId
fl/1hE7GGvG9iY8NtQn8N9y4KH8pN+Jsu1Gmf6dhaPayBs3wbR6GCoW5pVDeGTm1
Xxf5sKWI5GA9Ffp5Z8pBAaZqVdAh/qU2wjwsAbRvkgUJUmc2TIDDWb0OzVvpid2p
ZLUjUml2LqFLYHNoekBTnm9rF0bSKLdTDMF7hAAaa1HikeAQlPcshqZ1TrP6S5dh
wuKbiL4gI2sTSqQXozLAVkbdNIgb0BRzkIMNTpbhW1pMgcL3/hxNgYWK/G1Hp4G0
BNjt4BVdqwYtS+aZAUpGABguXeQPo8o=
-----END CERTIFICATE-----
Generated at Mon Oct 30 08:44:21 2023 by rpki-client on console-ams.rpki-client.org